Verify campaign attribution in three independent windows
Treat a time-bounded messaging campaign as three independently verifiable behaviors: eligibility or ledger attribution, outbound delivery, and inbound reply attribution. A deployed flag proves none of them. Check code-owned half-open boundaries, then query aggregate persisted ev…